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BRUSSELS, 23 May 2016 
MEP Martin Schulz 
President of the European Parliament 
60 rue Wiertz 
1047 Brussels - Belgium 


RE: Transatlantic Data Flows — European Parliament Privacy Shield Motion for Resolution 
Dear President Schulz, 


We are writing to you in light of this week’s upcoming European Parliament Plenary activities surrounding 
transatlantic data flows. DIGITALEUROPE has long supported the ambitions of the EU institutions to restore trust 
in transatlantic data flows. As such, we have openly welcomed the publication of the draft EU-US Privacy Shield 
Adequacy Decision and strongly support its prompt adoption, which is essential to re-establishing a sustainable 
path for data transfers between the EU and the US. 


However, we wish to express to you our deep concern over the language tabled by some Political Groups 
concerning the draft Adequacy Decision. We believe the adoption of a Motion for Resolution which includes 
language requesting for the European Commission to refrain from tabling a final Adequacy Decision and instead 
continue negotiations with the US Government while introducing a “sunset clause’ risks destabilising a delicate 
balance reached over 2 years of discussions between the EU and U.S. Such a destabilisation must be avoided. 


As we have repeatedly stressed, European and US businesses of all sizes, particularly SMEs, are operating in a 
state of legal uncertainty following the invalidation of the Safe Harbour framework by the Court of Justice of the 
EU (CJEU). Once formally adopted, the EU-US Privacy Shield will not only provide entities with a new legal 
mechanism for transatlantic data transfers, but will also ease the doubt which has been cast by some regulators 
on the use of alternative transfer mechanisms such as Standard Contractual Clauses (SCCs) and Binding Corporate 
Rules (BCRs) in the EU-US context. 


We therefore applaud the efforts of the European Commission to ensure that the new transfer tool is a solid 
mechanism that can withstand any test, including a possible Court challenge. We believe that the EU-US Privacy 
Shield achieves this goal and is an instrument that can reinstall much needed legal certainty. 


The new framework is more demanding on companies, placing strict rules for the onward transfer of data by 
requiring a contract for data sharing with any third party. Companies will also be required to respond to user 
complaints within 45 days. Such requirements go beyond the requirements found in the new General Data 
Protection Regulation (GDPR). While such obligations will be difficult for companies, DIGITALEUROPE members 
are ready to meet the compliance challenge. They are ready to do this not only because it is necessary from a legal 
point of view, but because it is good for data protection and strong data protection is critical to rebuilding 
transatlantic trust. We also take note of the yearly review mechanism and suspension clause, as well as the 
reinforced and institutionalised collaboration between the EU and the US authorities. These will allow for any 
necessary adjustments in the future. 


We believe that after months of uncertainty, it is time to restore trust and legal certainty for citizens and for the 
thousands of European and American businesses, both large and small, that depend on transatlantic data 
transfers. We cannot build a successful Digital Single Market without allowing companies to scale up and reach 
global markets. 
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DIGITALEUROPE thus urges the European Parliament to avoid adopting a Motion for Resolution which would risk 
negatively impacting the future tabling of a final EU-US Adequacy Decision and instead work to ensure a swift 
adoption of the Privacy Shield. 


Sincerely, 
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John Higgins 


Director General 
DIGITALEUROPE 


Ce 

MEP Manfred Weber, Chairman of the EPP Group in the European Parliament 

MEP Gianni Pittella, President of the S&D Group in the European Parliament 

MEP Syed Kamall, President of the ECR Group in the European Parliament 

MEP Guy Verhofstadt, President of the ALDE Group in the European Parliament 

MEP Rebecca Harms, Co-President of Greens/EFA Group in the European Parliament 
MEP Philippe Lamberts, Co-President of Greens/EFA Group in the European Parliament 
MEP Gabriele Zimmer, President of the GUE/NGL Group in the European Parliament 
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ABOUT DIGITALEUROPE 


DIGITALEUROPE represents the digital technology industry in Europe. Our members include some of the world's largest IT, 
telecoms and consumer electronics companies and national associations from every part of Europe. DIGITALEUROPE wants 
European businesses and citizens to benefit fully from digital technologies and for Europe to grow, attract and sustain the 
world's best digital technology companies. 


DIGITALEUROPE ensures industry participation in the development and implementation of EU policies. DIGITALEUROPE’s 
members include 61 corporate members and 37 national trade associations from across Europe. Our website provides 
further information on our recent news and activities: http://www.digitaleurope.org 


DIGITALEUROPE MEMBERSHIP 


Corporate Members 


Airbus, AMD, Apple, BlackBerry, Bose, Brother, CA Technologies, Canon, Cisco, Dell, Dropbox, Epson, Ericsson, Fujitsu, 
Google, Hewlett Packard Enterprise, Hitachi, HP Inc., Huawei, IBM, Ingram Micro, Intel, iQor, JVC Kenwood Group, Konica 
Minolta, Kyocera, Lenovo, Lexmark, LG Electronics, Loewe, Microsoft, Mitsubishi Electric Europe, Motorola Solutions, NEC, 
Nokia, Nvidia Ltd., Océ, Oki, Oracle, Panasonic Europe, Philips, Pioneer, Qualcomm, Ricoh Europe PLC, Samsung, SAP, SAS, 
Schneider Electric IT Corporation, Sharp Electronics, Siemens, Sony, Swatch Group, Technicolor, Texas Instruments, Toshiba, 
TP Vision, VMware, Western Digital, Xerox, Zebra Technologies, ZTE Corporation. 


National Trade Associations 


Austria: |OO Germany: BITKOM, ZVEI Slovakia: ITAS 

Belarus: INFOPARK Greece: SEPE Slovenia: GZS 

Belgium: AGORIA Hungary: IVSZ Spain: AMETIC 

Bulgaria: BAIT Ireland: ICT IRELAND Sweden: Foreningen Teknikforetagen i 
Cyprus: CITEA Italy: ANITEC Sverige, IT&Telekomforetagen 
Denmark: DI Digital, IT-BRANCHEN Lithuania: INFOBALT Switzerland: SWICO 

Estonia: ITL Netherlands: Nederland ICT, FIAR Turkey: Digital Turkey Platform, ECID 
Finland: FFT Poland: KIGEIT, PIIT, ZIPSEE Ukraine: IT UKRAINE 

France: AFNUM, Force Numérique, Portugal: AGEFE United Kingdom: techUK 

Tech in France Romania: ANIS, APDETIC 
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